PT-2025-8831 · Linux+7 · Linux Kernel+7
Fedor Pchelkin
·
Published
2025-01-15
·
Updated
2026-03-14
·
CVE-2024-58009
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A issue has been identified in the Linux kernel related to Bluetooth L2CAP handling. Specifically, a NULL sock pointer is passed into
l2cap sock alloc() when called from l2cap sock new connection cb(), and error handling paths should be aware of this. The problem arises because l2cap chan create() adds a soon-to-be-deallocated channel to a global list before it is properly initialized, but a more straightforward solution is to check for NULL instead of rearranging function calls. This issue was discovered by the Linux Verification Center using the SVACE static analysis tool.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
DoS
NULL Pointer Dereference
Improper Initialization
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Astra Linux
Debian
Linuxmint
Linux Kernel
Red Hat
Red Os
Suse
Ubuntu